$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer File: C14FC28CF60C23B61EE423210818638E76BDD5F0.cer (raw, json) Hash identifier: xHAcFP7P704q6hnw8EkW490KEWmuOr0hifcxsxsLE+g= Subject key identifier: C1:4F:C2:8C:F6:0C:23:B6:1E:E4:23:21:08:18:63:8E:76:BD:D5:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 752E8160E5B9E567CBD1A3E814B4FA2EC121DBC3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft caRepository: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 30 Jul 2024 21:19:22 +0000 Certificate not after: Tue 29 Jul 2025 21:24:22 +0000 Subordinate resources: AS: 266446 IP: 170.82.192.0/22 IP: 200.80.111.0/24 IP: 2804:37f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2e:81:60:e5:b9:e5:67:cb:d1:a3:e8:14:b4:fa:2e:c1:21:db:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 21:19:22 2024 GMT Not After : Jul 29 21:24:22 2025 GMT Subject: CN=C14FC28CF60C23B61EE423210818638E76BDD5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:ff:3a:79:32:c5:6c:87:92:5c:0f:fb:4d: 42:74:00:27:22:11:15:f5:71:10:c8:61:2e:81:52: ab:d4:92:01:7c:b8:44:e8:0d:ab:37:ed:16:e7:f7: fa:f2:bb:c6:a8:a1:f7:9e:a8:33:29:b0:77:88:22: 48:60:ef:2b:8e:b9:cd:5b:e3:d8:28:40:27:6c:8c: 28:ea:4f:ce:bf:96:59:93:c6:a8:7b:92:78:33:e4: 5e:8c:b5:86:4d:83:9f:10:78:7b:30:29:45:7e:1d: 6a:3a:dc:84:12:53:46:00:36:0d:ee:7a:5b:34:3f: 3b:e2:b6:02:ad:bd:16:49:2c:cd:64:db:a4:e9:40: 3a:0a:a1:67:af:6d:ce:45:b0:ef:7c:bd:77:99:62: 30:2b:fc:7f:dd:c3:65:7b:e6:74:c6:b9:66:2a:dd: 99:5c:d2:26:65:23:70:4d:bc:be:04:85:48:14:80: 1f:12:8b:fb:4b:05:ae:7d:f7:2e:ab:47:30:17:9b: 5e:c3:ae:f9:93:24:31:13:4a:64:48:59:e8:b5:f5: b3:9b:a2:33:80:db:05:d0:ae:da:ee:82:cc:d4:45: 0d:70:77:d8:b6:dc:16:81:3d:c0:50:fc:c3:a1:96: 36:6a:66:bd:54:5c:70:63:55:e8:88:b9:c4:05:55: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:4F:C2:8C:F6:0C:23:B6:1E:E4:23:21:08:18:63:8E:76:BD:D5:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.192.0/22 200.80.111.0/24 IPv6: 2804:37f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266446 Signature Algorithm: sha256WithRSAEncryption b0:21:d8:0c:fa:77:07:7c:d7:b7:28:13:bb:ee:bd:6d:da:6f: e4:c8:c7:7e:89:60:13:39:b2:01:73:f4:be:bc:dd:d3:30:72: 0c:14:43:81:15:a2:95:da:07:30:f9:af:44:2c:03:8f:dc:56: fa:9b:23:2a:2b:94:dd:0b:c4:a7:29:78:5f:95:8b:87:e1:f8: 9b:0a:9d:3f:db:6b:0a:45:77:19:b7:f5:5e:6b:c6:77:08:f4: df:e3:54:23:8d:ec:de:c1:a8:59:04:55:80:1a:2b:25:62:f8: e6:cd:a1:bb:43:6d:13:3a:14:a8:71:7f:59:13:18:2c:c7:f4: e5:12:87:89:a2:25:f0:00:c5:9d:55:a9:b3:66:0c:09:c5:bc: 49:b5:50:23:73:fc:ce:9a:5b:5f:a9:0a:8e:b1:7e:d3:52:49: 54:f4:c5:02:28:36:8a:11:0b:18:9a:b9:24:d7:93:fd:55:67: df:74:52:00:22:c1:2a:bf:f8:b0:8e:dc:66:69:6d:60:81:1a: 8f:91:58:85:c0:47:99:8f:a5:7b:77:8f:80:cc:b4:e3:15:c1: 23:8b:ed:f1:98:7f:60:12:b6:97:24:25:70:9d:4b:f6:44:8f: fe:39:f5:b2:61:4d:0f:d1:11:48:2b:14:45:eb:ca:60:8a:55: b2:46:eb:54 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdS6BYOW55WfL0aPoFLT6LsEh28MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MzAyMTE5MjJaFw0yNTA3MjkyMTI0MjJaMDMxMTAvBgNV BAMTKEMxNEZDMjhDRjYwQzIzQjYxRUU0MjMyMTA4MTg2MzhFNzZCREQ1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIo/86eTLFbIeSXA/7TUJ0ACci ERX1cRDIYS6BUqvUkgF8uEToDas37Rbn9/ryu8aoofeeqDMpsHeIIkhg7yuOuc1b 49goQCdsjCjqT86/llmTxqh7kngz5F6MtYZNg58QeHswKUV+HWo63IQSU0YANg3u els0PzvitgKtvRZJLM1k26TpQDoKoWevbc5FsO98vXeZYjAr/H/dw2V75nTGuWYq 3Zlc0iZlI3BNvL4EhUgUgB8Si/tLBa599y6rRzAXm17DrvmTJDETSmRIWei19bOb ojOA2wXQrtrugszURQ1wd9i23BaBPcBQ/MOhljZqZr1UXHBjVeiIucQFVY2fAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBT8KM9gwjth7k IyEIGGOOdr3V8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDNR dHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4d2EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQz UXRwNXFiOGZyTlhFNG9HNVhmY1FzSlJTTnJZYlVCYVVUN1Jka3NUOHdhLzAvQzE0 RkMyOENGNjBDMjNCNjFFRTQyMzIxMDgxODYzOEU3NkJERDVGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlLAAwQAyFBvMA0EAgACMAcDBQAoBDf0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQzjANBgkqhkiG9w0BAQsFAAOCAQEAsCHYDPp3 B3zXtygTu+69bdpv5MjHfolgEzmyAXP0vrzd0zByDBRDgRWildoHMPmvRCwDj9xW +psjKiuU3QvEpyl4X5WLh+H4mwqdP9trCkV3Gbf1XmvGdwj03+NUI43s3sGoWQRV gBorJWL45s2hu0NtEzoUqHF/WRMYLMf05RKHiaIl8ADFnVWps2YMCcW8SbVQI3P8 zppbX6kKjrF+01JJVPTFAig2ihELGJq5JNeT/VVn33RSACLBKr/4sI7cZmltYIEa j5FYhcBHmY+le3ePgMy04xXBI4vt8Zh/YBK2lyQlcJ1L9kSP/jn1smFND9ERSCsU RevKYIpVskbrVA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:26 2024 by rpki-client on console-ams.rpki-client.org